> Date: Sat, 2 Jun 2012 10:02:07 +0100
> From: Stuart Henderson <s...@spacehopper.org>
> 
> As with other entries in /etc/services, this adds to the ports to
> net.inet.tcp.baddynamic, preventing using the associated ports as a
> valid dynamic source port number.
> 
> OK?

Probably a good idea.  AMT is very evil.  If you enable AMT and use
dhcp, AMT will use the same IP address as the host itself.  But it
will steal any packets whose destination port is one of these.  I'm
pretty sure that means using these ports for a TCP session on the host
will fail.

> Index: services
> ===================================================================
> RCS file: /cvs/src/etc/services,v
> retrieving revision 1.78
> diff -u -p -r1.78 services
> --- services  23 Mar 2012 15:32:31 -0000      1.78
> +++ services  2 Jun 2012 09:00:02 -0000
> @@ -288,6 +288,10 @@ spamd            8025/tcp                # spamd(8)
>  spamd-sync   8025/udp                # spamd(8) synchronisation
>  spamd-cfg    8026/tcp                # spamd(8) configuration
>  dhcpd-sync   8067/udp                # dhcpd(8) synchronisation
> +amt-soap-http        16992/tcp               # Intel AMT SOAP/HTTP
> +amt-soap-https       16993/tcp               # Intel AMT SOAP/HTTPS
> +amt-redir-tcp        16994/tcp               # Intel AMT Redirection/TCP
> +amt-redir-tls        16995/tcp               # Intel AMT Redirection/TLS
>  hunt         26740/udp               # hunt(6)
>  #
>  # Appletalk

Reply via email to